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1. Introduction 


The use of the Forward Error Correction (FEC) codes is a classic 
solution to improve the reliability of unicast, multicast, and 
broadcast Content Delivery Protocols (CDP) and applications. 

[RFC6363] describes a generic framework to use FEC schemes with media 
delivery applications, and for instance with real-time streaming 
media applications based on the Real-time Transport Protocol (RTP). 
Similarly, [RFC5052] describes a generic framework to use FEC schemes 
with object delivery applications (where the objects are files, for 
example) based on the Asynchronous Layered Coding (ALC) [RFC5775] and 
NACK-Oriented Reliable Multicast (NORM) [RFC5740] transport 
protocols. 


More specifically, the [RFC5053] and [RFC5170] FEC schemes introduce 
erasure codes based on sparse parity-check matrices for object 
delivery protocols like ALC and NORM. These codes are efficient in 
terms of processing but not optimal in terms of erasure recovery 
capabilities when dealing with "small" objects. 


The Reed-Solomon FEC codes described in this document belong to the 
class of Maximum Distance Separable (MDS) codes that are optimal in 


terms of erasure recovery capability. It means that a receiver can 
recover the k source symbols from any set of exactly k encoding 
symbols. These codes are also systematic codes, which means that the 
k source symbols are part of the encoding symbols. However, they are 
limited in terms of maximum source block size and number of encoding 
symbols. Since the real-time constraints of media delivery 


applications usually limit the maximum source block size, this is not 
considered to be a major issue in the context of FECFRAME for many 
(but not necessarily all) use cases. Additionally, if the encoding/ 
decoding complexity is higher with Reed-Solomon codes than it is with 
[RFC5053] or [RFC5170] codes, it remains reasonable for most use 
cases, even in case of a software codec. 


Many applications dealing with reliable content transmission or 
content storage already rely on packet-based Reed-Solomon erasure 
recovery codes. In particular, many of them use the Reed-Solomon 
codec of Luigi Rizzo [RS-codec] [Rizzo97]. The goal of the present 
document is to specify a simple Reed-Solomon scheme that is 
compatible with this codec. 


More specifically, [RFC5510] introduced such Reed-Solomon codes and 
several associated FEC schemes that are compatible with the [RFC5052] 
framework. The present document inherits from Section 8 of 
[RFC5510], "Reed-Solomon Codes Specification for the Erasure 
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Channel", the specifications of the core Reed-Solomon codes based on 
Vandermonde matrices and specifies a simple FEC scheme that is 
compatible with FECFRAME [RFC6363]: 


The Fully-Specified FEC Scheme with FEC Encoding ID 8 specifies a 
simple way of using of Reed-Solomon codes over GF(2*%*m), with 

2 <= m <= 16, in order to protect arbitrary Application Data Unit 
(ADU) flows. 


Therefore, Sections 4, 5, 6, and 7 of [RFC5510] that define 
[RFC5052]-specific Formats and Procedures are not considered and are 
replaced by FECFRAME-specific Formats and Procedures. 


For instance, with this scheme, a set of Application Data Units 
(ADUS) coming from one or several media delivery applications (e.g., 
a set of RTP packets), are grouped in an ADU block and FEC encoded as 
a whole. With Reed-Solomon codes over GF(2%%8), there is a strict 
limit over the number of ADUs that can be protected together, since 
the number of encoded symbols, n, must be inferior or equal to 255. 
This constraint is relaxed when using a higher finite field size (m > 
8), at the price of an increased computational complexity. 


2. Terminology 
The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", “SHALL NOT", 


"SHOULD", “SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this 
document are to be interpreted as described in RFC 2119 [RFC2119]. 


3. Definitions Notations and Abbreviations 
3.1. Definitions 
This document uses the following terms and definitions. Some of 


these terms and definitions are FEC scheme specific and are in line 
with [RFC5052]: 


Source symbol: unit of data used during the encoding process. In 
this specification, there is always one source symbol per ADU. 


Encoding symbol: unit of data generated by the encoding process. 
With systematic codes, source symbols are part of the encoding 


symbols. 


Repair symbol: encoding symbol that is not a source symbol. 
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Code rate: the k/n ratio, i.e., the ratio between the number of 
source symbols and the number of encoding symbols. By definition, 
the code rate is such that: 0 < code rate <= 1. A code rate close 
to 1 indicates that a small number of repair symbols have been 
produced during the encoding process. 


Systematic code: FEC code in which the source symbols are part of 
the encoding symbols. The Reed-Solomon codes introduced in this 
document are systematic. 


Source Block: a block of k source symbols that are considered 
together for the encoding. 


Packet erasure channel: a communication path where packets are 
either dropped (e.g., by a congested router, or because the number 
of transmission errors exceeds the correction capabilities of the 
physical layer codes) or received. When a packet is received, it 
is assumed that this packet is not corrupted. 


Some of these terms and definitions are FECFRAME specific and are in 
line with [RFC6363]: 


Application Data Unit (ADU): The unit of source data provided as 
payload to the transport layer. Depending on the use case, an ADU 
may use an RTP encapsulation. 


(Source) ADU Flow: A sequence of ADUs associated with a transport- 
layer flow identifier (such as the standard 5-tuple {Source IP 
address, source port, destination IP address, destination port, 
transport protocol}). Depending on the use case, several ADU 
flows may be protected together by FECFRAME. 


ADU Block: a set of ADUs that are considered together by the 
FECFRAME instance for the purpose of the FEC scheme. Along with 
the flow ID (F[]), length (L[]), and padding (Pad[]) fields, they 
form the set of source symbols over which FEC encoding will be 
performed. 


ADU Information (ADUI): a unit of data constituted by the ADU and 
the associated Flow ID, Length and Padding fields (Section 4.3). 
This is the unit of data that is used as source symbol. 


FEC Framework Configuration Information (FFCI): Information that 


controls the operation of FECFRAME. The FFCI enables the 
synchronization of the FECFRAME sender and receiver instances. 
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FEC Source Packet: At a sender (respectively, at a receiver) a 
payload submitted to (respectively, received from) the transport 
protocol containing an ADU along with an Explicit Source FEC 
Payload ID (that must be present in the FEC scheme defined by the 
present document, see Section 5.1.2). 


FEC Repair Packet: At a sender (respectively, at a receiver) a 
payload submitted to (respectively, received from) the transport 
protocol containing one repair symbol along with a Repair FEC 
Payload ID and possibly an RTP header. 


The above terminology is illustrated in Figure 1 (sender’s point of 


view): 
+---------------------- + 
| Application | 
+---------------------- + 
| 
| (1) Application Data Units (ADUs) 
| 
vV 
+---------------------- + +---------------- + 
FECFRAME | | 


| | 
| | -------------------------- >| FEC Scheme | 
|(2) Construct source | | 
| blocks | | (4) FEC Encoding | 
| | 


(6) Construct FEC <-------------------------- | 
source and repair 
packets (5) Explicit Source FEC 
À CRRA ANSE a + Payload IDs dene Sige Se ee T 


Repair FEC Payload IDs 
Repair symbols 


| (7) FEC source and repair packets 
v 
| Transport Layer | 
| (e.g., UDP) | 
Figure 1: Terminology used in this document (sender). 


3.2. Notations 


This document uses the following notations. Some of them are FEC 
scheme specific. 


k denotes the number of source symbols in a source block. 
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denotes the maximum number of source symbols for any source 


block. 


denotes the number of encoding symbols generated for a source 


block. 


denotes the encoding symbol length in bytes. 


denotes a finite field (also known as the Galois Field) with q 
elements. 


We assume that q = 2^^m in this document. 


defines the length of the elements in the finite field, in 


bits. 


In this document, m is such that 2 <= m <= 16. 


defines the number of elements in the finite field. We have: 
q = 2^^m in this specification. 


denotes the 


"code rate", i.e., the k/n ratio. 


denotes a raised to the power b. 


Some of them are FECFRAME specific: 


B 


denotes the number of ADUs per ADU block. 


max_B denotes the maximum number of ADUs for any ADU block. 


3.3. Abbreviations 


This document uses the following abbreviations: 


ADU 


ADUI 


ESI 


FEC 


FFCI 


FSSI 


MDS 


SBN 


SDP 


stands 


stands 


stands 


stands 


stands 


stands 


stands 


stands 


stands 
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for 


for 


for 


for 


for 


for 


for 


for 


for 


Application Data Unit. 

Application Data Unit Information. 

Encoding Symbol ID. 

Forward Error (or Erasure) Correction code. 
FEC Framework Configuration Information. 
FEC Scheme-Specific Information. 

Maximum Distance Separable code. 

Source Block Number. 


Session Description Protocol. 
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4. Common Procedures Related to the ADU Block and Source Block Creation 


This section introduces the procedures that are used during the ADU 
block and the related source block creation for the FEC scheme 
considered. 


4.1. Restrictions 
This specification has the following restrictions: 


o there MUST be exactly one source symbol per ADUI, and therefore 
per ADU; 


o there MUST be exactly one repair symbol per FEC Repair Packet; 
o there MUST be exactly one source block per ADU block. 
4.2. ADU Block Creation 
Two kinds of limitations exist that impact the ADU block creation: 
o at the FEC Scheme level: the finite field size (m parameter) 
directly impacts the maximum source block size and the maximum 


number of encoding symbols; 


o at the FECFRAME instance level: the target use case can have real- 
time constraints that can/will define a maximum ADU block size. 


Note that terms "maximum source block size" and "maximum ADU block 
size" depend on the point of view that is adopted (FEC Scheme versus 
FECFRAME instance). However, in this document, both refer to the 
same value since Section 4.1 requires there is exactly one source 
symbol per ADU. We now detail each of these aspects. 


The finite field size parameter m defines the number of non-zero 
elements in this field, which is equal to: q- 1 = 2^^m - 1. This q 
— 1 value is also the theoretical maximum number of encoding symbols 
that can be produced for a source block. For instance, when m = 8 
(default) there is a maximum of 2798 - 1 = 255 encoding symbols. So: 
k < n <= 255. Given the target FEC code rate (e.g., provided by the 
end-user or upper application when starting the FECFRAME instance, 
and taking into account the known or estimated packet loss rate), the 
sender calculates: 


max_k = floor((2*%*%m - 1) * CR) 
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This max_k value leaves enough room for the sender to produce the 
desired number of repair symbols. Since there is one source symbol 
per ADU, max_k is also an upper bound to the maximum number of ADUs 
per ADU block. 


The source ADU flows can have real-time constraints. When there are 
multiple flows, with different real-time constraints, let us consider 
the most stringent constraints (see [RFC6363], Section 10.2, item 6 
for recommendations when several flows are globally protected). In 
that case, the maximum number of ADUs of an ADU block must not exceed 
a certain threshold since it directly impacts the decoding delay. 

The larger the ADU block size, the longer a decoder may have to wait 
until it has received a sufficient number of encoding symbols for 
decoding to succeed, and therefore the larger the decoding delay. 
When the target use case is known, these real-time constraints result 
in an upper bound to the ADU block size, max_rt. 


For instance, if the use case specifies a maximum decoding latency 1, 
and if each source ADU covers a duration d of a continuous media (we 
assume here the simple case of a constant bit-rate ADU flow), then 
the ADU block size must not exceed: 


max_rt = floor(l / d) 
After encoding, this block will produce a set of at most n = max_rt / 
CR encoding symbols. These n encoding symbols will have to be sent 
at a rate of n / 1 packets per second. For instance, with d = 10 ms, 
1 = 1 s, max_rt = 100 ADUs. 
If we take into account all these constraints, we find: 


max_B = min(max_k, max_rt) 


This max_B parameter is an upper bound to the number of ADUs that can 
constitute an ADU block. 


4.3. Source Block Creation 


In their most general form, FECFRAME and the Reed-Solomon FEC scheme 
are meant to protect a set of independent flows. Since the flows 
have no relationship to one another, the ADU size of each flow can 
potentially vary significantly. Even in the special case of a single 
flow, the ADU sizes can largely vary (e.g., the various frames of a 
"Group of Pictures" (GOP) of an H.264 flow will have different 
sizes). This diversity must be addressed since the Reed-Solomon FEC 
scheme requires a constant encoding symbol size (E parameter) per 
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source block. Since this specification requires that there is only 
one source symbol per ADU, E must be large enough to contain all the 
ADUs of an ADU block along with their prepended 3 bytes (see below). 


In situations where E is determined per source block (default, 
specified by the FFCI/FSSI with S = 0, Section 5.1.1.2), E is equal 
to the size of the largest ADU of this source block plus 3 (for the 
prepended 3 bytes; see below). In this case, upon receiving the 
first FEC Repair Packet for this source block, since this packet MUST 
contain a single repair symbol (Section 5.1.3), a receiver determines 
the E parameter used for this source block. 


In situations where E is fixed (specified by the FFCI/FSSI with 

S = 1, Section 5.1.1.2), then E must be greater or equal to the size 
of the largest ADU of this source block plus 3 (for the prepended 3 
bytes; see below). If this is not the case, an error is returned. 
How to handle this error is use-case specific (e.g., a larger E 
parameter may be communicated to the receivers in an updated FFCI 
message using an appropriate mechanism) and is not considered by this 
specification. 


The ADU block is always encoded as a single source block. There are 
a total of B <= max_B ADUs in this ADU block. For the ADU i, with 
0 <= i <= B-1, 3 bytes are prepended (Figure 2): 


o The first byte, F[i] (Flow ID), contains the integer identifier 
associated to the source ADU flow to which this ADU belongs to. 
It is assumed that a single byte is sufficient, or said 
differently, that no more than 256 flows will be protected by a 
single instance of FECFRAME. 


o The following 2 bytes, L[i] (Length), contain the length of this 


ADU, in network byte order (i.e., big endian). This length is for 
the ADU itself and does not include the F[i], L[i], or Pad[i] 
fields. 


Then zero padding is added to ADU i (if needed), in field Pad[i], for 


alignment purposes up to a size of exactly E bytes. The data unit 
resulting from the ADU i and the F[i], L[i]l, and Pad[i] fields, is 
called ADU Information (or ADUI). Each ADUI contributes to exactly 


one source symbol of the source block. 
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Encoding Symbol Length (E) 
< ------------------------------------------------ == == === === > 
+----+-------- +----------------------- +----------------------------- + 
|F[O]| Lo] | ADU[0] | Pad[0] | 
+----+-------- + +------------ +----------------------------- + 
|EF[1]| L1] | ADU[1] | Pad[1] | 
+----+-------- += 4+------------------------ —— + 
SEA |, L2] | ADU[2] | 
+----+-------- +------ = + 
|FI3]| L(3]1 |ADU[3] | Pad[3] | 
+----+-------- +------ = + 
\ / 
\/ 
simple FEC encoding 
= + 
Repair 4 

= + 
RE ————— + 
| Repair 7 
= + 


Figure 2: Source block creation, for code rate 1/2 (equal number of 
source and repair symbols; 4 in this example), and S = 0. 


Note that neither the initial 3 bytes nor the optional padding are 
sent over the network. However, they are considered during FEC 
encoding. It means that a receiver who lost a certain FEC source 
packet (e.g., the UDP datagram containing this FEC source packet) 
will be able to recover the ADUI if FEC decoding succeeds. Thanks to 
the initial 3 bytes, this receiver will get rid of the padding (if 
any) and identify the corresponding ADU flow. 


Simple Reed-Solomon FEC Scheme over GF(2*%%m) for Arbitrary ADU Flows 
This Fully-Specified FEC Scheme specifies the use of Reed-Solomon 
codes over GF(2""m), with 2 <= m <= 16, with a simple FEC encoding 
for arbitrary packet flows. 

Formats and Codes 
1. FEC Framework Configuration Information 
The FEC Framework Configuration Information (or FFCI) includes 


information that must be communicated between the sender and 
receiver(s) [RFC6363]. More specifically, it enables the 
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synchronization of the FECFRAME sender and receiver instances. It 
includes both mandatory elements and scheme-specific elements, as 
detailed below. 


5.1.1.1. Mandatory Information 


o FEC Encoding ID: the value assigned to this Fully-Specified FEC 
scheme MUST be 8, as assigned by IANA (Section 8). 


When SDP is used to communicate the FFCI, this FEC Encoding ID MUST 
be carried in the ’encoding-id’ parameter of the ’fec-repair-flow’ 
attribute specified in RFC 6364 [RFC6364]. 


5.1.1.2. FEC Scheme-Specific Information 


The FEC Scheme-Specific Information (FSSI) includes elements that are 
specific to the present FEC scheme. More precisely: 


o Encoding Symbol Length (E): a non-negative integer, inferior to 
27916, that indicates either the length of each encoding symbol in 
bytes ("Strict" mode, i.e., if S = 1), or the maximum length of 
any encoding symbol (i.e., if S = 0). 


o Strict (S) flag: when set to 1, this flag indicates that the E 
parameter is the actual encoding symbol length value for each 
block of the session (unless otherwise notified by an updated FFCI 
if this possibility is considered by the use case or CDP). When 
set to 0, this flag indicates that the E parameter is the maximum 
encoding symbol length value for each block of the session (unless 
otherwise notified by an updated FFCI if this possibility is 
considered by the use case or CDP). 


o m parameter (m): an integer that defines the length of the 
elements in the finite field, in bits. We have: 2 <= m <= 16. 


These elements are required both by the sender (Reed-Solomon encoder) 
and the receiver(s) (Reed-Solomon decoder). 


When SDP is used to communicate the FFCI, this FEC scheme-specific 
information MUST be carried in the ’fssi’ parameter of the 
'fec-repair-flow’ attribute, in textual representation as specified 
in RFC 6364 [RFC6364]. For instance: 


a=fec-repair-flow: encoding-id=8; fssi=E:1400,S:0,m:8 
If another mechanism requires the FSSI to be carried as an opaque 


octet string (for instance after a Base64 encoding), the encoding 
format consists of the following 3 octets of Figure 3: 
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o Encoding symbol length (E): 16-bit field. 
o Strict (S) flag: 1-bit field. 
o m parameter (m): 7-bit field. 

0 1 2 

Od. 2 3. ANS :6 7, 89 OF 1-2 3 AS 6.82 9-0 1: 2:53 
t—+-+-4+-+4+-4+-4+-4+-4+-4-4+-4+-4+-4-4+-4+-4-4-4+-4-4-4-4-4-4+ 
| Encoding Symbol Length (E) |s] m | 
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 

Figure 3: FSSI encoding format. 


5.1.2. Explicit Source FEC Payload ID 


A FEC source packet MUST contain an Explicit Source FEC Payload ID 
that is appended to the end of the packet as illustrated in Figure 4. 


$-------------------------------- + 
| IP Header | 
$-------------------------------- + 
| Transport Header | 
$-------------------------------- + 
| ADU | 
$-------------------------------- + 
| Explicit Source FEC Payload ID | 
$-------------------------------- + 


Figure 4: Structure of a FEC Source Packet with the Explicit Source 
FEC Payload ID. 


More precisely, the Explicit Source FEC Payload ID is composed of the 
Source Block Number, the Encoding Symbol ID, and the Source Block 
Length. The length of the first 2 fields depends on the m parameter 
(transmitted separately in the FFCI, Section 5.1.1.2): 


o Source Block Number (SBN) ((32-m)-bit field): this field 
identifies the source block to which this FEC source packet 
belongs. 


o Encoding Symbol ID (ESI) (m-bit field): this field identifies the 
source symbol contained in this FEC source packet. This value is 
such that 0 <= ESI <= k - 1 for source symbols. 
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o Source Block Length (k) (16-bit field): this field provides the 
number of source symbols for this source block, i.e., the k 
parameter. If 16 bits are too much when m <= 8, it is needed when 
8 < m <= 16. Therefore, we provide a single common format 
regardless of m. 


0 1 2 3 
012345678901234567890123456789 01 
ES D D D D D En D D D D D D D D D D D D D Re D D D D 
| Source Block Number (24 bits) | Enc. Symb. ID | 
SA D D D D En D En D D D D D D D D D D Rs D D D 
| Source Block Length (k) | 
PA A D D D D A Do D D D D Ds A = 


Figure 5: Source FEC Payload ID encoding format for m = 8 (default). 


0 1 2 3 
01234567890123456789012345678<9041 
toto ta tatat—ta tata tata tata tata ta tata tatatatatatatatattatatat—t-t 

| Source Block Nb (16 bits) | Enc. Symbol ID (16 bits) 

À A Re D D tata ti ta tata tata ta tata ta ta tata tatatatattatatat-t-Ft 
| Source Block Length (k) | 
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 


Figure 6: Source FEC Payload ID encoding format for m = 16. 


The format of the Source FEC Payload ID for m = 8 and m = 16 are 
illustrated in Figures 5 and 6, respectively. 


5.1.3. Repair FEC Payload ID 
A FEC repair packet MUST contain a Repair FEC Payload ID that is 


prepended to the repair symbol(s) as illustrated in Figure 7. There 
MUST be a single repair symbol per FEC repair packet. 


+-------------------------------—- + 
| IP Header | 
Re + 
| Transport Header | 
+-------------------------------—- + 
| Repair FEC Payload ID | 
Re + 
| Repair Symbol | 
+-------------------------------- + 


Figure 7: Structure of a FEC Repair Packet with the Repair FEC 
Payload ID. 


Roca, et al. Standards Track [Page 15] 


RFC 6865 Simple Reed-Solomon FEC Scheme February 2013 


More precisely, the Repair FEC Payload ID is composed of the Source 
Block Number, the Encoding Symbol ID, and the Source Block Length. 
The length of the first 2 fields depends on the m parameter 
(transmitted separately in the FFCI, Section 5.1.1.2): 


o Source Block Number (SBN) ((32-m)-bit field): this field 
identifies the source block to which the FEC repair packet 
belongs. 


o Encoding Symbol ID (ESI) (m-bit field): this field identifies the 
repair symbol contained in this FEC repair packet. This value is 
such that k <= ESI <= n - 1 for repair symbols. 


o Source Block Length (k) (16-bit field): this field provides the 
number of source symbols for this source block, i.e., the k 
parameter. If 16 bits are too much when m <= 8, it is needed when 
8 < m <= 16. Therefore, we provide a single common format 
regardless of m. 


0 1 2 3 
O12 345 6783 9 0 1 2 3 4.5 6 7 8 9 © 1234 5. 67 8 9 OL 
LS D D D D D D En D D D D D D D D D D D D D RD RE D D 
| Source Block Number (24 bits) | Enc. Symb. ID | 
PA D D D D D Es D D D D D D D D D D D D D D Rs D D D 
| Source Block Length (k) | 
+-+-+-+-+-+-+-+-+-+-+- +++ 


Figure 8: Repair FEC Payload ID encoding format for m = 8 (default). 


0 1 2 3 
01234567890123456789012345678901 
Pat A atm t ata t ata ta tanta tata tata ta tata tata tata tata D D 

| Source Block Nb (16 bits) | Enc. Symbol ID (16 bits) 
Patt rtm t atta ta tat ta tanta tata ta D D tata D D D D 
| Source Block Length (k) | 

À A D D D os D D so D is D 


Figure 9: Repair FEC Payload ID encoding format for m = 16. 


The format of the Repair FEC Payload ID for m = 8 and m = 16 are 
illustrated in Figures 8 and 9, respectively. 
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5.2. Procedures 
The following procedures apply: 


o The source block creation MUST follow the procedures specified in 
Section 4.3. 


o The SBN value MUST start with value 0 for the first block of the 
ADU flow and MUST be incremented by 1 for each new source block. 
Wrapping to zero will happen for long sessions, after value 
2°*(32-m) - 1. 


o The ESI of encoding symbols MUST start with value 0 for the first 
symbol and MUST be managed sequentially. The first k values 
(0 <= ESI <= k - 1) identify source symbols, whereas the last n-k 
values (k <= ESI <= n - 1) identify repair symbols. 


o The FEC repair packet creation MUST follow the procedures 
specified in Section 5.1.3. 


5.3. FEC Code Specification 


The present document inherits from Section 8 of [RFC5510], "Reed- 
Solomon Codes Specification for the Erasure Channel", the 
specifications of the core Reed-Solomon codes based on Vandermonde 
matrices. 


6. Security Considerations 


The FECFRAME document [RFC6363] provides a comprehensive analysis of 
security considerations applicable to FEC schemes. Therefore, the 
present section follows the security considerations section of 
[RFC6363] and only discusses topics that are specific to the use of 
Reed-Solomon codes. 


6.1. Attacks Against the Data Flow 
6.1.1. Access to Confidential Content 


The Reed-Solomon FEC Scheme specified in this document does not 
change the recommendations of [RFC6363]. To summarize, if 
confidentiality is a concern, it is RECOMMENDED that one of the 
solutions mentioned in [RFC6363] is used with special considerations 
to the way this solution is applied (e.g., is encryption applied 
before or after FEC protection, within the end-system or ina 
middlebox) to the operational constraints (e.g., performing FEC 
decoding in a protected environment may be complicated or even 
impossible) and to the threat model. 


Roca, et al. Standards Track [Page 17] 


RFC 6865 Simple Reed-Solomon FEC Scheme February 2013 


6.1.2. Content Corruption 


The Reed-Solomon FEC Scheme specified in this document does not 
change the recommendations of [RFC6363]. To summarize, it is 
RECOMMENDED that one of the solutions mentioned in [RFC6363] is used 
on both the FEC Source and Repair Packets. 


6.2. Attacks Against the FEC Parameters 


The FEC Scheme specified in this document defines parameters that can 
be the basis of several attacks. More specifically, the following 
parameters of the FFCI may be modified by an attacker 

(Section 5.1.1.2): 


o FEC Encoding ID: changing this parameter leads the receiver to 
consider a different FEC Scheme, which enables an attacker to 
create a Denial of Service (DoS). 


o Encoding symbol length (E): setting this E parameter to a value 
smaller than the valid one enables an attacker to create a DoS 
since the repair symbols and certain source symbols will be larger 
than E, which is an incoherency for the receiver. Setting this E 
parameter to a value larger than the valid one has similar impacts 
when S = 1 since the received repair symbol size will be smaller 
than expected. On the opposite, it will not lead to any 
incoherency when S = 0 since the actual symbol length value for 
the block is determined by the size of any received repair symbol, 
as long as this value is smaller than E. However, setting this E 
parameter to a larger value may have impacts on receivers that 
pre-allocate memory space in advance to store incoming symbols. 


o Strict (S) flag: flipping this S flag from 0 to 1 (i.e., E is now 
considered as a strict value) enables an attacker to mislead the 
receiver if the actual symbol size varies over different source 
blocks. Flipping this S flag from 1 to 0 has no major 
consequences unless the receiver requires to have a fixed E value 
(e.g., because the receiver pre-allocates memory space). 


o m parameter: changing this parameter triggers a DoS since the 
receiver and sender will consider different codes, and the 
receiver will interpret the Explicit Source FEC Payload ID and 
Repair FEC Payload ID differently. Additionally, by increasing 
this m parameter to a larger value (typically m = 16 rather than 
8, when both values are possible in the target use case) will 
create additional processing load at a receiver if decoding is 
attempted. 
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It is therefore RECOMMENDED that security measures are taken to 
guarantee the FFCI integrity, as specified in [RFC6363]. How to 
achieve this depends on the way the FFCI is communicated from the 
sender to the receiver, which is not specified in this document. 


Similarly, attacks are possible against the Explicit Source FEC 
Payload ID and Repair FEC Payload ID: by modifying the Source Block 
Number (SBN), or the Encoding Symbol ID (ESI), or the Source Block 
Length (k), an attacker can easily corrupt the block identified by 
the SBN. Other consequences, that are use case and/or CDP dependent, 
may also happen. It is therefore RECOMMENDED that security measures 
are taken to guarantee the FEC Source and Repair Packets as stated in 
[RFC6363]. 


6.3. When Several Source Flows Are to Be Protected Together 


The Reed-Solomon FEC Scheme specified in this document does not 
change the recommendations of [RFC6363]. 


6.4. Baseline Secure FECFRAME Operation 


The Reed-Solomon FEC Scheme specified in this document does not 
change the recommendations of [RFC6363] concerning the use of the 
IPsec/ESP security protocol as a mandatory to implement (but not 
mandatory to use) security scheme. This is well suited to situations 
where the only insecure domain is the one over which FECFRAME 
operates. 


7. Operations and Management Considerations 


The FECFRAME document [RFC6363] provides a comprehensive analysis of 
operations and management considerations applicable to FEC schemes. 
Therefore, the present section only discusses topics that are 
specific to the use of Reed-Solomon codes as specified in this 
document. 


7.1. Operational Recommendations: Finite Field Size (m) 


The present document requires that m, the length of the elements in 
the finite field in bits, is such that 2 <= m <= 16. However, all 
possibilities are not equally interesting from a practical point of 
view. It is expected that m = 8, the default value, will be mostly 
used since it offers the possibility to have small to medium sized 
source blocks and/or a significant number of repair symbols (i.e., k 
< n <= 255). Additionally, elements in the finite field are 8 bits 
long, which makes read/write memory operations aligned on bytes 
during encoding and decoding. 
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An alternative when it is known that only very small source blocks 
will be used is m = 4 (i.e., k < n <= 15). Elements in the finite 
field are 4 bits long, so if 2 elements are accessed at a time, read/ 
write memory operations are aligned on bytes during encoding and 
decoding. 


An alternative when very large source blocks are needed is m = 16 
(i.e., k < n<= 65535). However, this choice has significant impact 
on the processing load. For instance, using pre-calculated tables to 
speed up operations over the finite field (as done with smaller 
finite fields) may require a prohibitive amount of memory to be used 
on embedded platforms. Alternative lightweight solutions (e.g., LDPC 
FEC [RFC5170]) may be preferred in situations where the processing 
load is an issue and the source block length is large enough 
[Matsuzono10]. 


Since several values for the m parameter are possible, the use case 


SHOULD define which value or values need to be supported. In 
situations where this is not specified, the default m = 8 value MUST 
be used. 


In any case, any compliant implementation MUST support at least the 
default m = 8 value. 


8. IANA Considerations 


Values of FEC Encoding IDs are subject to IANA registration. 
[RFC6363] defines general guidelines on IANA considerations. In 
particular, it defines the "FEC Framework (FECFRAME) FEC Encoding 
IDs" subregistry of the "Reliable Multicast Transport (RMT) FEC 
Encoding IDs and FEC Instance IDs" registry, whose registration 
procedure is IETF Review. 


This document registers one value in the "FEC Framework (FECFRAME) 
FEC Encoding IDs" subregistry as follows: 


8 refers to the Simple Reed-Solomon [RFC5510] FEC Scheme over 
GF (2^^m) for Arbitrary Packet Flows. 
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